RT1172: CAAM init fail with encrypted OTFAD and HAB enabled

[pieropischedda]

Goodmorning.

I'm working with RT1172 cpu that manage an emmc memory. The software is working fine.

Now I'm testing the OTFAD encryption and the secure boot.

I'm using the MCUXpresso Secure Provisioning to flash the board. With the encrypted OTFAD authenticated and the HAB disabled all works fine. Now I enabled the HAB, the firmware starts but gets an error when CAAM_init is invoked. The function caam_out_job_ring_test_and_remove fails.

What's wrong? Are there any fuse that I'm missing to burn or are there any special configuration needed for CAAM when HAB is enabled?

Thanks

[Kaidou · Accepted solution]

Hello.

It seems that the problem was that we were calling the CAAM_init function twice in the firmware with the encrypted OTFAD authenticated boot and the HAB enabled.
This generated an error when calling the CAAM_RNG_GenerateSecureKey function.
After removing the wrong CAAM_inti call, the CAAM initialized correctly.

Thanks for the answer anyway!

Is it possible to get support on this issue?
https://community.nxp.com/t5/i-MX-RT/IMXRT1172-flashloader-not-starting/m-p/1824091#M29233

Thanks!

[diego_charles]

Thanks for your response @Kaidou 

I will mark that as the answer. 

Sure, I am working on your other thread.

Best regards, 

Diego

[diego_charles]

Hi @pieropischedda 

Thanks for reaching us. 

I still have not encountered this issue before. But want your help to dig further into this , could you provide me more details regarding the following?

-All the fuses that you already burned. 

- Do you see any failure with the CAAM_M7 or CAAM_M4 demos? 

Any other detail about your application is welcome. 

Thanks for your patience. 

Diego